It would be good when entering the password in this screen to replace the characters with ***'s.

It appears in the poptransfer.ini file the password is encrypted so it would be good to hide it in the pop configurator.

In an earlier version (which I didn't actually release publicly), the passwords were hidden. I unhid them during debugging (or rather, a client had forgotten their passwords!) and didn't re-hide them as in my implementations it was only ever running on a server to which users didn't have access. My theory was that if someone could get to the POP Collector interface, then hiding the password was probably pointless - they had admin rights anyway!

I have rehidden the password.

I guess this is one of those should you/shouldn't you. I agree with your comments that popcollector should be on a server with limited access rights. However my personal take is this should be treated the same way as Windows domain username/passwords in that an admin can never see a password, only change it. That way personal privacy is protected somewhat.

Regarding MessageLog.mdb - Database size of the size you say is no issue and I agree, no tidy up required since a stop / delete / start is teh quick fix or stop / edit table / start will do the same.